Merge branch 'develop' into feature/25-use-dev-docs-container

Author: wphillipmoore

.github/workflows/ci-push.yml

@@ -31,7 +31,7 @@ jobs:
   # ---------------------------------------------------------------------------
 
   security-and-standards:
-    uses: wphillipmoore/standard-actions/.github/workflows/ci-security.yml@develop
+    uses: wphillipmoore/standard-actions/.github/workflows/ci-security.yml@v1.3
     permissions:
       contents: read
       security-events: write
@@ -127,18 +127,7 @@ jobs:
       - name: Run pip-licenses (license compliance)
         run: >-
           uv run pip-licenses
-          --allow-only="Apache-2.0;
-          Apache-2.0 OR BSD-2-Clause;
-          Apache Software License;
-          BSD License;
-          BSD-2-Clause;
-          BSD-3-Clause;
-          GPL-3.0-or-later;
-          MIT;
-          MIT License;
-          Mozilla Public License 2.0 (MPL 2.0);
-          PSF-2.0;
-          Python Software Foundation License"
+          --allow-only="$(grep -v '^#' .pip-licenses-allowlist | grep -v '^$' | paste -sd ';' -)"
 
   # ---------------------------------------------------------------------------
   # Integration tests
@@ -156,7 +145,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: wphillipmoore/standard-actions/actions/python/setup@develop
+        uses: wphillipmoore/standard-actions/actions/python/setup@v1.3
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -218,7 +207,7 @@ jobs:
 
       - name: Version divergence gate (PRs targeting develop)
         if: github.event_name == 'pull_request' && github.base_ref == 'develop'
-        uses: wphillipmoore/standard-actions/actions/release-gates/version-divergence@develop
+        uses: wphillipmoore/standard-actions/actions/release-gates/version-divergence@v1.3
         with:
           head-version-command: python3 -c "import tomllib; from pathlib import Path; print(tomllib.loads(Path('pyproject.toml').read_text())['project']['version'])"
           main-version-command: git show origin/main:pyproject.toml | python3 -c "import sys, tomllib; print(tomllib.loads(sys.stdin.read())['project']['version'])"

.github/workflows/ci.yml

@@ -29,7 +29,7 @@ jobs:
         run: uv sync --frozen --group docs
 
       - name: Deploy docs
-        uses: wphillipmoore/standard-actions/actions/docs-deploy@develop
+        uses: wphillipmoore/standard-actions/actions/docs-deploy@v1.3
         with:
           version-command: uv run python -c "from importlib.metadata import version; v=version('pymqrest'); print('.'.join(v.split('.')[:2]))"
           mike-command: uv run mike

.github/workflows/docs.yml

@@ -13,7 +13,7 @@ permissions:
 
 jobs:
   publish:
-    uses: wphillipmoore/standard-actions/.github/workflows/publish-release.yml@develop
+    uses: wphillipmoore/standard-actions/.github/workflows/publish-release.yml@v1.3
     permissions:
       attestations: write
       contents: write

.github/workflows/publish.yml

@@ -206,3 +206,4 @@ cython_debug/
 marimo/_static/
 marimo/_lsp/
 __marimo__/
+.worktrees/

.gitignore

@@ -5,6 +5,80 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 <!-- include: docs/standards-and-conventions.md -->
 <!-- include: docs/repository-standards.md -->
 
+## Auto-memory policy
+
+**Do NOT use MEMORY.md.** Never write to MEMORY.md or any file under the
+memory directory. All behavioral rules, conventions, and workflow instructions
+belong in managed, version-controlled documentation (CLAUDE.md, AGENTS.md,
+skills, or docs/). If you want to persist something, tell the human what you
+would save and let them decide where it belongs.
+
+## Parallel AI agent development
+
+This repository supports running multiple Claude Code agents in parallel via
+git worktrees. The convention keeps parallel agents' working trees isolated
+while preserving shared project memory (which Claude Code derives from the
+session's starting CWD).
+
+**Canonical spec:**
+[`standard-tooling/docs/specs/worktree-convention.md`](https://github.com/wphillipmoore/standard-tooling/blob/develop/docs/specs/worktree-convention.md)
+— full rationale, trust model, failure modes, and memory-path implications.
+The canonical text lives in `standard-tooling`; this section is the local
+on-ramp.
+
+### Structure
+
+```text
+~/dev/github/mq-rest-admin-python/        ← sessions ALWAYS start here
+  .git/
+  CLAUDE.md, src/, tests/, …              ← main worktree (usually `develop`)
+  .worktrees/                             ← container for parallel worktrees
+    issue-454-adopt-worktree-convention/  ← worktree on feature/454-...
+    …
+```
+
+### Rules
+
+1. **Sessions always start at the project root.**
+   `cd ~/dev/github/mq-rest-admin-python && claude` — never from inside
+   `.worktrees/<name>/`. This keeps the memory-path slug stable and shared.
+2. **Each parallel agent is assigned exactly one worktree.** The session
+   prompt names the worktree (see Agent prompt contract below).
+   - For Read / Edit / Write tools: use the worktree's absolute path.
+   - For Bash commands that touch files: `cd` into the worktree first,
+     or use absolute paths.
+3. **The main worktree is read-only.** All edits flow through a worktree
+   on a feature branch — the logical endpoint of the standing
+   "no direct commits to `develop`" policy.
+4. **One worktree per issue.** Don't stack in-flight issues. When a
+   branch lands, remove the worktree before starting the next.
+5. **Naming: `issue-<N>-<short-slug>`.** `<N>` is the GitHub issue
+   number; `<short-slug>` is 2–4 kebab-case tokens.
+
+### Agent prompt contract
+
+When launching a parallel-agent session, use this template (fill in the
+placeholders):
+
+```text
+You are working on issue #<N>: <issue title>.
+
+Your worktree is: /Users/pmoore/dev/github/mq-rest-admin-python/.worktrees/issue-<N>-<slug>/
+Your branch is:   feature/<N>-<slug>
+
+Rules for this session:
+- Do all git operations from inside your worktree:
+    cd <absolute-worktree-path> && git <command>
+- For Read / Edit / Write tools, use the absolute worktree path.
+- For Bash commands that touch files, cd into the worktree first
+  or use absolute paths.
+- Do not edit files at the project root. The main worktree is
+  read-only — all changes flow through your worktree on your
+  feature branch.
+```
+
+All fields are required.
+
 ## Project Overview
 
 `pymqrest` is a Python wrapper for the IBM MQ administrative REST API. The project provides a Python mapping layer for MQ REST API attribute translations and command metadata experiments. The current focus is on attribute mapping and metadata modeling.
@@ -18,24 +92,26 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 ### Standard Tooling
 
 ```bash
-cd ../standard-tooling && uv sync                                                # Install standard-tooling
-export PATH="../standard-tooling/.venv/bin:../standard-tooling/scripts/bin:$PATH" # Put tools on PATH
-git config core.hooksPath ../standard-tooling/scripts/lib/git-hooks               # Enable git hooks
+git config core.hooksPath ../standard-tooling/scripts/lib/git-hooks  # Enable git hooks
 ```
 
+Standard-tooling CLI tools (`st-commit`, `st-validate-local`, etc.) are
+pre-installed in the dev container images. No local setup required.
+
 ### Environment Setup
 
 ```bash
 # Install dependencies and sync environment
 uv sync --group dev
 ```
 
-### Three-Tier CI Model
+### Two-Tier CI Model
 
-Testing is split across three tiers with increasing scope and cost:
+Testing is split across two tiers with increasing scope and cost:
 
 **Tier 1 — Local pre-commit (seconds):** Fast smoke tests in a single
-container. Run before every commit. No MQ, no matrix.
+container. Enforced via the `.githooks` pre-commit gate on every commit.
+No MQ, no matrix.
 
 ```bash
 ./scripts/dev/test.sh        # Unit tests in dev-python:3.14
@@ -44,16 +120,14 @@ container. Run before every commit. No MQ, no matrix.
 ./scripts/dev/audit.sh       # pip-audit in dev-python:3.14
 ```
 
-**Tier 2 — Push CI (~3-5 min):** Triggers automatically on push to
-`feature/**`, `bugfix/**`, `hotfix/**`, `chore/**`. Single Python version
-(3.14), includes integration tests, no security scanners or release gates.
-Workflow: `.github/workflows/ci-push.yml` (calls `ci.yml`).
-
-**Tier 3 — PR CI (~8-10 min):** Triggers on `pull_request`. Full Python
+**Tier 2 — PR CI (~8-10 min):** Triggers on `pull_request`. Full Python
 matrix (3.12, 3.13, 3.14), all integration tests, security scanners (CodeQL,
 Trivy, Semgrep), standards compliance, and release gates. Workflow:
 `.github/workflows/ci.yml`.
 
+Push-CI was retired once `st-validate-local` reached parity with PR-CI.
+See wphillipmoore/standard-actions#176 for the parity audit and rationale.
+
 ### Validation
 
 ```bash

CLAUDE.md

@@ -1,6 +1,5 @@
 # This file was autogenerated by uv via the following command:
-#    uv export --no-hashes --group dev -o requirements-dev.txt
--e .
+#    uv export --no-hashes --only-group dev -o requirements-dev.txt
 boolean-py==5.0
     # via license-expression
 cachecontrol==0.14.4
@@ -45,7 +44,7 @@ packaging==26.0
     #   pytest
 pathspec==1.0.4
     # via mypy
-pip==26.0.1
+pip==26.1
     # via pip-api
 pip-api==0.0.34
     # via pip-audit
@@ -63,20 +62,19 @@ prettytable==3.17.0
     # via pip-licenses
 py-serializable==2.1.0
     # via cyclonedx-python-lib
-pygments==2.19.2
+pygments==2.20.0
     # via
     #   pytest
     #   rich
 pyparsing==3.3.2
     # via pip-requirements-parser
-pytest==9.0.2
+pytest==9.0.3
     # via pytest-cov
 pytest-cov==7.0.0
-requests==2.32.5
+requests==2.33.1
     # via
     #   cachecontrol
     #   pip-audit
-    #   pymqrest
 rich==14.3.3
     # via pip-audit
 ruff==0.15.4

requirements-dev.txt

@@ -1,100 +1,13 @@
 # This file was autogenerated by uv via the following command:
-#    uv export --no-hashes -o requirements.txt
+#    uv export --no-hashes --no-dev -o requirements.txt
 -e .
-boolean-py==5.0
-    # via license-expression
-cachecontrol==0.14.4
-    # via pip-audit
 certifi==2026.2.25
     # via requests
 charset-normalizer==3.4.4
     # via requests
-colorama==0.4.6 ; sys_platform == 'win32'
-    # via pytest
-coverage==7.13.4
-    # via pytest-cov
-cyclonedx-python-lib==11.6.0
-    # via pip-audit
-defusedxml==0.7.1
-    # via py-serializable
-filelock==3.25.0
-    # via cachecontrol
 idna==3.11
     # via requests
-iniconfig==2.3.0
-    # via pytest
-librt==0.8.1 ; platform_python_implementation != 'PyPy'
-    # via mypy
-license-expression==30.4.4
-    # via cyclonedx-python-lib
-markdown-it-py==4.0.0
-    # via rich
-mdurl==0.1.2
-    # via markdown-it-py
-msgpack==1.1.2
-    # via cachecontrol
-mypy==1.19.1
-mypy-extensions==1.1.0
-    # via mypy
-packageurl-python==0.17.6
-    # via cyclonedx-python-lib
-packaging==26.0
-    # via
-    #   pip-audit
-    #   pip-requirements-parser
-    #   pytest
-pathspec==1.0.4
-    # via mypy
-pip==26.0.1
-    # via pip-api
-pip-api==0.0.34
-    # via pip-audit
-pip-audit==2.10.0
-pip-licenses==5.5.1
-pip-requirements-parser==32.0.1
-    # via pip-audit
-platformdirs==4.9.2
-    # via pip-audit
-pluggy==1.6.0
-    # via
-    #   pytest
-    #   pytest-cov
-prettytable==3.17.0
-    # via pip-licenses
-py-serializable==2.1.0
-    # via cyclonedx-python-lib
-pygments==2.19.2
-    # via
-    #   pytest
-    #   rich
-pyparsing==3.3.2
-    # via pip-requirements-parser
-pytest==9.0.2
-    # via pytest-cov
-pytest-cov==7.0.0
-requests==2.32.5
-    # via
-    #   cachecontrol
-    #   pip-audit
-    #   pymqrest
-rich==14.3.3
-    # via pip-audit
-ruff==0.15.4
-sortedcontainers==2.4.0
-    # via cyclonedx-python-lib
-tomli==2.4.0
-    # via pip-audit
-tomli-w==1.2.0
-    # via pip-audit
-ty==0.0.19
-types-requests==2.32.4.20260107
-typing-extensions==4.15.0
-    # via
-    #   cyclonedx-python-lib
-    #   mypy
+requests==2.33.1
+    # via pymqrest
 urllib3==2.6.3
-    # via
-    #   requests
-    #   types-requests
-wcwidth==0.6.0
-    # via prettytable
+    # via requests

requirements.txt

@@ -4,9 +4,9 @@ set -euo pipefail
 export DOCKER_DEV_IMAGE="${DOCKER_DEV_IMAGE:-dev-python:3.14}"
 export DOCKER_TEST_CMD="${DOCKER_TEST_CMD:-uv sync --check --frozen --group dev && uv lock --check && uv run pip-audit -r requirements.txt -r requirements-dev.txt && uv run pip-licenses --allow-only=\"\$(grep -v '^\#' .pip-licenses-allowlist | grep -v '^\$' | paste -sd ';' -)\"}"
 
-if ! command -v docker-test >/dev/null 2>&1; then
-  echo "ERROR: docker-test not found on PATH." >&2
-  echo "Set up standard-tooling: export PATH=../standard-tooling/scripts/bin:\$PATH" >&2
+if ! command -v st-docker-test >/dev/null 2>&1; then
+  echo "ERROR: st-docker-test not found on PATH." >&2
+  echo "Set up standard-tooling: export PATH=../standard-tooling/.venv/bin:\$PATH" >&2
   exit 1
 fi
-exec docker-test
+exec st-docker-test